
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
File: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json)
Hash identifier: iiH5Tj2X8uvZKu6xtfsmLYXPVUKRDPu0ZcODlSRdQRI=
Subject key identifier: C5:9A:11:84:10:5B:E1:E4:5E:AA:08:17:C8:74:23:B6:2E:82:05:83
Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
Certificate issuer: /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Certificate serial: 36202B79E3A14FC02294499FDFED03EF9C03B0A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
Manifest number: F7
Signing time: Mon 02 Nov 2026 22:00:06 +0000
Manifest this update: Mon 02 Nov 2026 21:55:06 +0000
Manifest next update: Wed 04 Nov 2026 00:55:06 +0000
Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=)
2: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: i3k0o8IptMB51Jz+iDCQKw6CUpptUg3o0rx5FNrJoOE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 12:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:20:2b:79:e3:a1:4f:c0:22:94:49:9f:df:ed:03:ef:9c:03:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Validity
Not Before: Nov 2 21:55:06 2026 GMT
Not After : Nov 4 00:55:06 2026 GMT
Subject: CN=C59A1184105BE1E45EAA0817C87423B62E820583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:91:0f:cb:97:c3:67:4f:1a:31:54:da:ed:
f9:fd:e0:3a:ac:14:d5:c6:28:b6:95:2d:0b:da:82:
64:87:52:56:41:86:11:c9:7d:c8:b2:4d:cb:4f:bc:
b7:1d:09:43:ea:59:c4:f0:bd:40:16:6c:af:b4:26:
71:90:40:c1:88:4a:6f:46:1f:51:1b:80:59:18:da:
c5:1a:c2:ee:1a:82:98:ba:9b:8d:45:bc:fe:50:c7:
e8:2d:d7:3d:19:fb:92:36:74:1d:0a:55:0b:62:26:
f6:ee:ee:26:e7:ce:33:e7:fb:e3:cb:d6:a5:77:c8:
34:6c:f9:39:04:b9:bb:0d:aa:53:bf:c9:13:7c:51:
25:db:d9:7e:be:3e:9c:1c:86:c8:32:43:d5:59:5e:
e1:eb:72:5d:47:56:2d:65:58:53:fd:2f:48:9e:fb:
59:2c:bc:53:9a:6d:14:a4:6c:f5:60:1e:6b:eb:83:
53:f7:cd:88:82:86:f7:55:a8:93:65:06:9c:80:08:
f8:ab:76:6e:c2:f7:54:32:6b:a5:e8:0d:6c:78:f1:
9b:b7:fd:88:db:35:04:e8:cf:12:45:d3:a1:47:dd:
d9:12:ec:c3:7c:c4:48:9f:6d:4f:4d:7d:db:86:a5:
4c:5d:58:e6:1c:c8:6e:84:1b:46:85:66:b8:34:50:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:11:84:10:5B:E1:E4:5E:AA:08:17:C8:74:23:B6:2E:82:05:83
X509v3 Authority Key Identifier:
keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:ee:0f:d2:95:ca:a1:41:86:a1:c3:ac:1e:bf:07:74:40:
ed:ca:ec:80:b1:64:2d:2b:cd:31:3f:83:5c:ce:30:81:6d:fe:
cf:44:19:9a:eb:54:de:cb:c4:4f:2a:86:8a:21:47:b0:0f:92:
f2:df:9e:7c:70:79:81:6b:65:60:b8:30:a2:d2:93:a4:2e:73:
aa:ea:89:23:f8:d9:72:40:4f:1c:e8:53:a8:db:ee:2b:0b:20:
2b:c6:19:35:07:a1:0e:65:8c:3f:be:ac:f0:37:7f:16:19:51:
bf:10:d9:65:ab:90:d8:67:de:01:40:c0:bf:4b:cd:8a:b9:8a:
0e:db:bb:fc:e1:d4:c5:1a:11:d5:11:81:d7:28:c7:96:fa:4a:
ce:38:29:42:15:68:07:42:3a:da:d5:32:b4:ef:b2:89:39:64:
57:a1:8e:c8:82:d0:37:9c:88:44:61:21:04:db:11:5b:37:3a:
45:92:ca:00:69:7a:a4:79:c7:02:83:27:28:fe:42:3a:42:2f:
d7:28:74:5a:13:16:6b:bb:dc:60:d0:e0:f7:73:a5:9a:95:ec:
eb:d4:bf:e0:1d:f9:06:c1:d6:1e:b6:0d:81:4b:ed:3d:62:13:
59:e7:ff:36:c9:75:e4:0d:55:92:4c:b1:68:57:c1:df:b9:be:
02:75:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:32:19 2026 by rpki-client